HackingCustomer Data InvolvedIDENTITY_GOVERNMENTIDENTITY_BASICHighContained
Financial Asset Management Systems
bd_8d7306e5505060e9 · schema v1 · pii pii-v1
Full breach record for Financial Asset Management Systems →Financial Asset Management Systems (FAMS) reported an external system breach (hacking) occurring on March 31, 2023, discovered on August 31, 2023. The incident compromised names and Social Security Numbers of 10,055 individuals, including 52 Maine residents. FAMS notified consumers in writing on September 29, 2023, and provided 12 months of credit monitoring and identity theft protection via TransUnion.
Leak gap clock⏱ Leak >90d29 days discovery → filing
⚠ unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
This filing is one of 3 about the same incident.View merged incident
A leak claim by lockbit_3 about this victim predates this filing by 125 days.View originating leak claim
Linked disclosures
Why this link?Regulatory filings (2) · sorted by filing gap
- bd_1464bacc7c9f8c7dCalifornia State AGfiled 2023-09-29Candidate
- bd_5ac1e084b2eac573Montana State AGfiled 2023-09-29Verified
Source provenance
- Source URL
- https://www.maine.gov/agviewer/content/ag/985235c7-cb95-4be2-8792-a1252b4f8318/176fb75b-23f8-4a8d-a8db-85b6c8695872.shtml
DisclosureLens links to the originating regulator URL — full filing bodies are not redistributed from public surfaces (§4.5).
- Filed at
- Sep 29, 2023
- Raw hash
- 2827f3c247d9d2ea876e92037f80f54560715089cd5e036a626ea369bc05223f
Reporting entity
- Name
- Financial Asset Management Systemsnorm: financial asset management
- Domain
- fams.net
Victim entity
- Name
- Financial Asset Management Systemsnorm: financial asset management
- Domain
- fams.net
Incident
- Discovered
- Aug 31, 2023
- Materiality determined
- —
- Notification sent
- Sep 29, 2023
- Affected individuals
- 10,055
- Data types
- IDENTITY_GOVERNMENTIDENTITY_BASIC
- Attack vector
- Unauthorized Access
- MITRE ATT&CK
- T1190 Exploit Public-Facing Application
- Threat actor
- ExternalFinancial
- Regulator citations
- Filed data breach notice with Maine Attorney General
- Initial access
- exploit_public_facing
Compliance
- Time to disclose
- 29 days(29 days from discovery to filing)
- Compliance flags
- Leak >90dME AG ≤30d · 29d
- Discovery-date grounding
- unattributedNo provenance was recorded for this discovery date and it matches no other date on the record. It may be correct, but it is not independently grounded.
- Clock breakdown
Statute Window Elapsed Threshold Status Maine Discovered: Aug 31, 2023→ Filed with AG: Sep 29, 202329d 30 days ME AG ≤30d
Extraction provenance
- Status
- No extraction artifact recorded for this disclosure.